Update SECURITY.md: add break once more

This commit is contained in:
Jeroen 2022-08-23 17:38:12 +02:00
parent 68e9681240
commit 577bfbd35e
Signed by: jeroen
GPG Key ID: 7C7028F783798BAB

View File

@ -16,6 +16,7 @@ This Gitea instance is configured following best practices, in order to thwart l
- Any plain-text (HTTP) traffic is redirected to the TLS secure counterpart (HTTPS). - Any plain-text (HTTP) traffic is redirected to the TLS secure counterpart (HTTPS).
- TLS (or more specifically: TLSv1.2 and TLSv1.3) is used for transit encryption - with HSTS and the following ciphers: - TLS (or more specifically: TLSv1.2 and TLSv1.3) is used for transit encryption - with HSTS and the following ciphers:
``` ```
ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:AES-256-GCM-SHA384:EECDH+AESGCM:EDH+AESGCM ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:AES-256-GCM-SHA384:EECDH+AESGCM:EDH+AESGCM
- OCSP stapling is enabled. - OCSP stapling is enabled.